CA2973230A1 - Methodes et systeme de detection d'attaques d'injection de fausses donnees - Google Patents

Methodes et systeme de detection d'attaques d'injection de fausses donnees Download PDF

Info

Publication number
CA2973230A1
CA2973230A1 CA2973230A CA2973230A CA2973230A1 CA 2973230 A1 CA2973230 A1 CA 2973230A1 CA 2973230 A CA2973230 A CA 2973230A CA 2973230 A CA2973230 A CA 2973230A CA 2973230 A1 CA2973230 A1 CA 2973230A1
Authority
CA
Canada
Prior art keywords
fault
sensor
computer device
component
profile
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
CA2973230A
Other languages
English (en)
Inventor
William James Premerlani
Chaitanya Ashok Baone
Yan PAN
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
General Electric Co
Original Assignee
General Electric Co
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by General Electric Co filed Critical General Electric Co
Publication of CA2973230A1 publication Critical patent/CA2973230A1/fr
Abandoned legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00—Testing or monitoring of control systems or parts thereof
    • G05B23/02—Electric testing or monitoring
    • G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0218—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterised by the fault detection method dealing with either existing or incipient faults
    • G05B23/0224—Process history based detection method, e.g. whereby history implies the availability of large amounts of data
    • G05B23/0227—Qualitative history assessment, whereby the type of data acted upon, e.g. waveforms, images or patterns, is not relevant, e.g. rule based assessment; if-then decisions
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/22—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
    • G06F11/2205—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested
    • G06F11/2221—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested to test input/output devices or peripheral units
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/22—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
    • G06F11/2205—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested
    • G06F11/2215—Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested to test error correction or detection circuits
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
    • G06F11/324—Display of status information
    • G06F11/327—Alarm or error message display
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/36—Preventing errors by testing or debugging software
    • G06F11/3668—Software testing
    • G06F11/3672—Test management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425—Traffic logging, e.g. anomaly detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1416—Event detection, e.g. attack signature detection
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/18—Network protocols supporting networked applications, e.g. including control of end-device applications over a network
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/20—Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Software Systems (AREA)
  • Quality & Reliability (AREA)
  • Medical Informatics (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Automation & Control Theory (AREA)
  • Remote Monitoring And Control Of Power-Distribution Networks (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Injection Moulding Of Plastics Or The Like (AREA)
  • Combined Controls Of Internal Combustion Engines (AREA)
  • Supply And Distribution Of Alternating Current (AREA)
CA2973230A 2016-07-25 2017-07-13 Methodes et systeme de detection d'attaques d'injection de fausses donnees Abandoned CA2973230A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/218,822 US10372569B2 (en) 2016-07-25 2016-07-25 Methods and system for detecting false data injection attacks
US15/218,822 2016-07-25

Publications (1)

Publication Number Publication Date
CA2973230A1 true CA2973230A1 (fr) 2018-01-25

Family

ID=59101304

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2973230A Abandoned CA2973230A1 (fr) 2016-07-25 2017-07-13 Methodes et systeme de detection d'attaques d'injection de fausses donnees

Country Status (7)

Country Link
US (1) US10372569B2 (fr)
EP (1) EP3276521A1 (fr)
JP (1) JP2018032382A (fr)
CN (1) CN107659554A (fr)
BR (1) BR102017014273A2 (fr)
CA (1) CA2973230A1 (fr)
MX (1) MX2017009602A (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113039411A (zh) * 2018-11-28 2021-06-25 三菱电机株式会社 攻击消除装置、攻击消除方法以及攻击消除程序

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10824529B2 (en) * 2017-12-29 2020-11-03 Intel Corporation Functional safety system error injection technology
US10805329B2 (en) * 2018-01-19 2020-10-13 General Electric Company Autonomous reconfigurable virtual sensing system for cyber-attack neutralization
US11943236B2 (en) * 2018-04-26 2024-03-26 Hitachi Energy Ltd Technologies for detecting cyber-attacks against electrical distribution devices
US11354406B2 (en) * 2018-06-28 2022-06-07 Intel Corporation Physics-based approach for attack detection and localization in closed-loop controls for autonomous vehicles
US10783389B2 (en) 2018-08-02 2020-09-22 Denso International America, Inc. Systems and methods for avoiding misrecognition of traffic signs and signals by hacking
US20200081813A1 (en) * 2018-09-11 2020-03-12 Hewlett Packard Enterprise Development Lp Sensor Reliability Determination
EP3623984A1 (fr) * 2018-09-17 2020-03-18 Secure-IC SAS Circuit configuré pour surveiller une charge utile sensible
US20200099252A1 (en) * 2018-09-26 2020-03-26 Abb Schweiz Ag Secure distributed state estimation for networked microgrids
US20200106301A1 (en) * 2018-10-01 2020-04-02 Abb Schweiz Ag Decentralized false data mitigation for nested microgrids
US11520881B2 (en) 2019-01-23 2022-12-06 General Electric Company Framework for cyber-physical system protection of electric vehicle charging stations and power grid
BR112021018695A2 (pt) * 2019-04-25 2021-11-23 Abb Schweiz Ag Método e sistema para contagem de produção em indústrias de processo usando inteligência artificial
US11657148B2 (en) * 2019-05-10 2023-05-23 General Electric Company Event analysis in an electric power system
CN111431561B (zh) * 2020-03-10 2021-09-28 国电南瑞科技股份有限公司 一种考虑网络攻击的电力系统预想故障集生成方法和装置
EP3879362A1 (fr) * 2020-03-11 2021-09-15 Siemens Gamesa Renewable Energy A/S Procédé mis en uvre par ordinateur pour identifier un accès non autorisé d'une infrastructure informatique de parc éolien
CN111258223A (zh) * 2020-03-12 2020-06-09 电子科技大学 一种基于滑模的切换网络化控制系统安全控制方法
US11176016B1 (en) * 2020-09-22 2021-11-16 International Business Machines Corporation Detecting and managing anomalies in underground sensors for agricultural applications
CN112565180B (zh) * 2020-10-27 2021-12-28 西安交通大学 基于移动目标防御的电网防御方法、系统、设备及介质
CN113094712B (zh) * 2021-05-17 2022-08-26 国网山东省电力公司电力科学研究院 基于自适应滑模控制器的电力信息物理系统攻击防御方法
CN113256096B (zh) * 2021-05-18 2022-07-12 西华大学 一种计及虚假数据注入攻击的电网故障诊断方法
CN113722189B (zh) * 2021-09-16 2024-07-05 中国船舶重工集团海装风电股份有限公司 基于工业互联网的风电多源异构数据采集汇聚系统
CN114123353B (zh) * 2022-01-26 2022-05-06 南方电网数字电网研究院有限公司 基于安全防护的智慧能源系统及其控制方法
CN114977192B (zh) * 2022-05-27 2023-09-12 浙江大学海南研究院 抵抗随机虚假数据注入的风电场并网点电压优化控制方法
US20240193027A1 (en) * 2022-12-09 2024-06-13 Baker Hughes Holdings Llc Enhanced transducer fault detection
CN116304621B (zh) * 2023-03-01 2024-06-04 浙江大学 基于频谱域数据驱动的智能电网虚假数据注入攻击定位方法

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5206595A (en) * 1991-09-10 1993-04-27 Electric Power Research Institute Advanced cable fault location
US5809045A (en) 1996-09-13 1998-09-15 General Electric Company Digital current differential system
US7006010B2 (en) * 2002-01-08 2006-02-28 Kirk S. Thomas Clamp assemblies and methods
CN100418283C (zh) * 2005-12-21 2008-09-10 长沙理工大学 网络环境下基于模式匹配的电力系统继电保护信息安全防护方法
CN100370676C (zh) * 2005-12-21 2008-02-20 长沙理工大学 基于神经网络的变电站自动化系统信息安全防护方法
US20120284790A1 (en) 2006-09-11 2012-11-08 Decision-Zone Inc. Live service anomaly detection system for providing cyber protection for the electric grid
US8924033B2 (en) 2010-05-12 2014-12-30 Alstom Grid Inc. Generalized grid security framework
US8712596B2 (en) 2010-05-20 2014-04-29 Accenture Global Services Limited Malicious attack detection and analysis
US8893216B2 (en) 2011-06-15 2014-11-18 Cisco Technology, Inc. Security measures for the smart grid
EP2645516B1 (fr) 2012-03-30 2015-06-17 ABB Technology AG Détection d'îlotage dans un réseau de distribution d'électricité
CN102761122B (zh) * 2012-07-06 2014-10-29 华北电力大学 一种电力状态估计系统假数据注入攻击的防御方法
US9177139B2 (en) 2012-12-30 2015-11-03 Honeywell International Inc. Control system cyber security
US10284373B2 (en) 2013-12-13 2019-05-07 University Of North Dakota Smart grid secure communications method and apparatus
US10038401B2 (en) * 2014-02-19 2018-07-31 University Of Utah Research Foundation Systems and methods for fault detection
CN104573510B (zh) * 2015-02-06 2017-08-04 西南科技大学 一种智能电网恶意数据注入攻击及检测方法

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113039411A (zh) * 2018-11-28 2021-06-25 三菱电机株式会社 攻击消除装置、攻击消除方法以及攻击消除程序

Also Published As

Publication number Publication date
US10372569B2 (en) 2019-08-06
MX2017009602A (es) 2018-09-10
JP2018032382A (ja) 2018-03-01
BR102017014273A2 (pt) 2018-03-20
EP3276521A1 (fr) 2018-01-31
CN107659554A (zh) 2018-02-02
US20180024900A1 (en) 2018-01-25

Similar Documents

Publication Publication Date Title
US10372569B2 (en) Methods and system for detecting false data injection attacks
Chen et al. Measurement-based estimation of linear sensitivity distribution factors and applications
US9841456B2 (en) Electric outage detection and localization
JP6173946B2 (ja) 電力系統監視装置、電力系統制御装置及び電力系統監視方法
US9306391B2 (en) Direct current transmission and distribution system and method of operating the same
Decker et al. Experience and applications of phasor measurements to the Brazilian interconnected power system
US10025336B2 (en) System and method for analyzing oscillatory stability in electrical power transmission systems
US20180054059A1 (en) System stabilization control device and power system control system
US11169189B2 (en) Systems and methods for operating generators based on generator steady state stability limits
US9823311B2 (en) System to identify potential electrical network faults combining vibration and power quality analysis
WO2018177540A1 (fr) Système, procédé et produit programme d'ordinateur d'analyse de défaillance améliorée d'un système d'alimentation électrique
US20150160670A1 (en) Methods and systems for using distributed energy resources in an electric network
Darvishi et al. Threshold-based monitoring of multiple outages with PMU measurements of area angle
US20150120221A1 (en) Method and system for detecting islanding effect in power electrical network topology
Hua et al. Efficient probabilistic contingency analysis through a stability measure considering wind perturbation
Kumar et al. Probabilistic risk and severity analysis of power systems with high penetration of photovoltaics
CN107250931B (zh) 能源服务推荐引擎
CN111044100A (zh) 一种用于电力计量的传感器装置及控制方法
Wang et al. A trend‐based approach for situation awareness in power systems
Leelaruji et al. Computing sensitivities from synchrophasor data for voltage stability monitoring and visualization
Deng et al. Real‐time transient instability detection based on perturbed voltage trajectories
KR101338125B1 (ko) 계통환경 적응／지능형 과도 안정도 고장파급방지 시스템
KR102302915B1 (ko) 전압안정도 지수를 활용한 부하차단 장치
KR102342450B1 (ko) 전력망에서의 비선형 진동 검출장치 및 그 방법
Wu et al. Monitoring power system transient stability using synchrophasor data

Legal Events

Date Code Title Description
FZDE Discontinued

Effective date: 20220301